Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: ZLLaOWqlM8MUNuG3rMI+rVDqf7HsbisGXfpyKu5KAlA=
Subject key identifier: DE:4D:C2:7E:F7:3F:64:C6:38:DA:70:B7:4B:89:68:14:9F:98:19:18
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 0194BC72CB3F951932268E676289D5F47B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: B0
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: VfNEyPPJroslwmQ43zfG/fkJ4Es79iqSTXSPgSxkdXw=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cb:3f:95:19:32:26:8e:67:62:89:d5:f4:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=de4dc27ef73f64c638da70b74b8968149f981918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:02:b2:25:eb:5c:e3:98:61:16:85:c4:c5:
a8:ce:0e:64:f7:59:96:dd:ab:2c:67:14:d9:25:06:
d8:24:f5:5e:78:c6:e7:96:d7:cf:e2:6a:4d:c2:6d:
ab:30:ef:f7:79:6b:4b:54:00:42:4f:ee:24:d7:22:
fb:21:86:cd:d9:2c:b8:32:a5:d1:76:99:83:28:bc:
a4:95:89:3b:30:28:8a:08:7d:7c:02:59:b3:f8:fb:
38:13:bd:29:23:be:91:5a:83:18:34:4c:6c:84:cf:
1b:93:47:cb:74:2c:76:77:2f:ce:db:09:96:f5:d5:
64:83:00:1f:9a:a0:f3:32:b0:d6:4a:a5:4c:1b:29:
36:3d:26:36:44:33:5d:0d:dd:e3:ca:6c:c9:5c:65:
62:ca:a2:3d:ff:fe:a0:8c:a9:ea:7b:02:7b:fe:67:
b0:25:fc:9d:7e:8c:f8:6a:9b:8f:53:5a:ae:aa:1f:
12:3b:03:82:1b:54:b9:13:31:46:2f:97:93:21:40:
8a:04:25:a5:8d:46:74:29:c4:31:0f:46:10:80:71:
d3:ab:5d:ad:cd:e7:5e:74:e8:1c:f2:1d:72:70:ab:
0f:5a:14:d7:a6:9a:5f:99:c0:24:b2:8b:fc:0c:4f:
fb:77:06:b0:0d:e5:3f:da:00:9d:71:9e:88:99:4f:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4D:C2:7E:F7:3F:64:C6:38:DA:70:B7:4B:89:68:14:9F:98:19:18
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e8:6b:56:14:52:93:20:c4:12:c0:a1:2e:5f:c7:d5:81:d0:
87:b0:10:1f:cc:c0:c9:c6:ee:d8:7e:e6:c9:20:71:53:3b:02:
af:61:e2:22:3b:54:bb:eb:df:37:fc:a5:ed:9e:be:1b:33:b7:
eb:b9:f4:91:cb:bc:01:08:11:51:78:e8:dd:0f:bb:62:0b:5e:
89:b1:9d:af:55:a4:2b:96:59:91:45:1f:14:b6:d0:e8:b7:2c:
43:55:a4:b2:32:37:f8:bc:4a:af:28:c0:3e:bb:ba:48:a2:ad:
b0:76:ba:e2:31:34:c4:9e:5e:47:e3:ea:16:1a:41:a8:b8:dd:
1a:f4:46:c5:a8:d5:31:e7:65:d8:5e:e9:fc:14:65:cc:41:81:
91:47:6a:3e:91:d7:7c:99:a5:97:d9:53:3c:28:7a:dc:53:a0:
89:16:07:f2:02:34:8f:c4:b1:c1:6b:fa:95:a0:7b:bc:2f:de:
9b:f2:19:9a:7f:bb:c6:e5:f6:98:25:e2:88:48:2a:04:bd:93:
71:24:0f:e7:fd:56:46:0f:10:68:33:90:c2:68:e5:26:5c:56:
45:e3:ef:4c:51:66:ea:14:7c:ef:97:e8:ed:b8:d9:10:5e:d8:
ba:b4:1b:72:67:4a:ec:bf:14:47:e5:87:77:e0:42:f2:27:f6:
4b:de:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:49:59 2025 by rpki-client